bravox
Activity analysis
HackerFeeds has tracked 33 victims claimed by bravox since May 2025, most recently in October 2026 — ranking #137 of 332 groups (0.1% of all tracked ransomware victims). It posted 10 victims in the last 90 days, down 9% on the previous 90 days (11). Its most-targeted sector is Technology (5 victims), followed by Healthcare (4). The United States accounts for 10 victims (30% of those with a known location).
Victims per year
- 20252
- 202630
Top sectors
- Technology5
- Healthcare4
- Business Services4
- Other3
- Financial Services3
- Agriculture and Food Production2
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
Recent victims
No victims tracked yet.